All,
The Gmail Security team has updated the trusted root list for Gmail S/MIME as follows:
Removed trusted roots:
CN=AC Raíz Certicámara S.A.,O=Sociedad Cameral de Certificación Digital - Certicámara S.A.,C=CO
SHA256 Thumbprint: A6C51E0DA5CA0A9309D2E4C0E40C2AF9107AAE8203857FE198E3E769E343085C
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
SHA256 Thumbprint: 687FA451382278FFF0C8B11F8D43D576671C6EB2BCEAB413FB83D965D06D2FF2
CN=Autoridad de Certificacion Firmaprofesional CIF A62634068,C=ES
SHA256 Thumbprint: 04048028BF1F2864D48F9AD4D83294366A828856553F3B14303F90147F5D40EF
SHA256 Thumbprint: 063E4AFAC491DFD332F3089B8542E94617D893D7FE944E10A7937EE29D9693C0
CN=Chambers of Commerce Root,OU=http://www.chambersign.org,O=AC Camerfirma SA CIF A82743287,C=EU
SHA256 Thumbprint: 0C258A12A5674AEF25F28BA7DCFAECEEA348E541E6F5CC4EE63B71B361606AC3
SHA256 Thumbprint: 0F993C8AEF97BAAF5687140ED59AD1821BB4AFACF0AA9A58B5D57A338A3AFBCB
CN=Deutsche Telekom Root CA 2,OU=T-TeleSec Trust Center,O=Deutsche Telekom AG,C=DE
SHA256 Thumbprint: B6191A50D0C3977F7DA99BCDAAC86A227DAEB9679EC70BA3B0C9D92271C170D3
SHA256 Thumbprint: FF856A2D251DCD88D36656F450126798CFABAADE40799C722DE4D2B5DB36A73A
SHA256 Thumbprint: 5EDB7AC43B82A06A8761E8D7BE4979EBF2611F7DD79BF91C1C6B566A219ED766
SHA256 Thumbprint: B478B812250DF878635C2AA7EC7D155EAA625EE82916E2CD294361886CD1FBD4
SHA256 Thumbprint: A0234F3BC8527CA5628EEC81AD5D69895DA5680DC91D1CB8477F33F878B95B0B
SHA256 Thumbprint: A0459B9F63B22559F5FA5D4C6DB3F9F72FF19342033578F073BF1D1B46CBB912
SHA256 Thumbprint: 136335439334A7698016A0D324DE72284E079D7B5220BB8FBD747816EEBEBACA
CN=Global Chambersign Root,OU=http://www.chambersign.org,O=AC Camerfirma SA CIF A82743287,C=EU
SHA256 Thumbprint: EF3CB417FC8EBF6F97876C9E4ECE39DE1EA5FE649141D1028B7D11C0B2298CED
SHA256 Thumbprint: BEC94911C2955676DB6C0A550986D76E3BA005667C442C9762B4FBB773DE228C
SHA256 Thumbprint: CA42DD41745FD0B81EB902362CF9D8BF719DA1BD1B1EFC946F5B4C99F42C1B9E
SHA256 Thumbprint: BC104F15A48BE709DCA542A7E1D4B9DF6F054527E802EAA92D595444258AFE71
CN=OISTE WISeKey Global Root GC CA,OU=OISTE Foundation Endorsed,O=WISeKey,C=CH
SHA256 Thumbprint: 8560F91C3624DABA9570B5FEA0DBE36FF11A8323BE9486854FB3F34A5571198D
CN=QuoVadis Root Certification Authority,OU=Root Certification Authority,O=QuoVadis Limited,C=BM
SHA256 Thumbprint: A45EDE3BBBF09C8AE15C72EFC07268D693A21C996FD51E67CA079460FD6D8873
SHA256 Thumbprint: 7908B40314C138100B518D0735807FFBFCF8518A0095337105BA386B153DD927
CN=Staat der Nederlanden Root CA - G2,O=Staat der Nederlanden,C=NL
SHA256 Thumbprint: 668C83947DA63B724BECE1743C31A0E6AED0DB8EC5B31BE377BB784F91B6716F
CN=Swisscom Root CA 2,OU=Digital Certificate Services,O=Swisscom,C=ch
SHA256 Thumbprint: F09B122C7114F4A09BD4EA4F4A99D558B46E4C25CD81140D29C05613914C3841
SHA256 Thumbprint: 3B222E566711E992300DC0B15AB9473DAFDEF8C84D0CEF7D3317B4C1821D1436
SHA256 Thumbprint: 363F3C849EAB03B0A2A0F636D7B86D04D3AC7FCFE26A0A9121AB9795F6E176DF
SHA256 Thumbprint: 9D190B2E314566685BE8A889E27AA8C7D7AE1D8AADDBA3C1ECF9D24863CD34B9
SHA256 Thumbprint: FE863D0822FE7A2353FA484D5924E875656D3DC9FB58771F6F616F9D571BC592
SHA256 Thumbprint: CB627D18B58AD56DDE331A30456BC65C601A4E9B18DEDCEA08E7DAAA07815FF0
SHA256 Thumbprint: 5A885DB19C01D912C5759388938CAFBBDF031AB2D48E91EE15589B42971D039C
SHA256 Thumbprint: D40E9C86CD8FE468C1776959F49EA774FA548684B6C406F3909261F4DCE2575C
SHA256 Thumbprint: 0753E940378C1BD5E3836E395DAEA5CB839E5046F1BD0EAE1951CF10FEC7C965
SHA256 Thumbprint: 43F257412D440D627476974F877DA8F1FC2444565A367AE60EDDC27A412531AE
SHA256 Thumbprint: CBB5AF185E942A2402F9EACBC0ED5BB876EEA3C1223623D00447E4F3BA554B65
SHA256 Thumbprint: 92A9D9833FE1944DB366E8BFAE7A95B6480C2D6C6C2A1BE65D4236B608FCA1BB
SHA256 Thumbprint: EB04CF5EB1F39AFA762F2BB120F296CBA520C1B97DB1589565B81CB9A17B7244
SHA256 Thumbprint: 69DDD7EA90BB57C93E135DC85EA6FCD5480B603239BDC454FC758B2A26CF7F79
SHA256 Thumbprint: 9ACFAB7E43C8D880D06B262A94DEEEE4B4659989C3D0CAF19BAF6405E41AB7DF
SHA256 Thumbprint: 2399561127A57125DE8CEFEA610DDF2FA078B5C8067F4E828290BFB860E84B3C
SHA256 Thumbprint: 7600295EEFE85B9E1FD624DB76062AAAAE59818A54D2774CD4C0B2C01131E1B3
SHA256 Thumbprint: E75E72ED9F560EEC6EB4800073A43FC3AD19195A392282017895974A99026B6C
SHA256 Thumbprint: C1B48299ABA5208FE9630ACE55CA68A03EDA5A519C8802A0D3A673BE8F8E557D
SHA256 Thumbprint: E38655F4B0190C84D3B3893D840A687E190A256D98052F159E6D4A39F589A6EB
SHA256 Thumbprint: 78833A783BB2986C254B9370D3C20E5EBA8FA7840CBF63FE17297A0B0119685E
CN=BJCA Global Root CA1,O=BEIJING CERTIFICATE AUTHORITY,C=CN
SHA256 Thumbprint: F3896F88FE7C0A882766A7FA6AD2749FB57A7F3E98FB769C1FA7B09C2C44D5AE
CN=BJCA Global Root CA2,O=BEIJING CERTIFICATE AUTHORITY,C=CN
SHA256 Thumbprint: 574DF6931E278039667B720AFDC1600FC27EB66DD3092979FB73856487212882
CN=Certum EC-384 CA,OU=Certum Certification Authority,O=Asseco Data Systems S.A.,C=PL
SHA256 Thumbprint: 6B328085625318AA50D173C98D8BDA09D57E27413D114CF787A0F5D06C030CF6
CN=Certum Trusted Root CA,OU=Certum Certification Authority,O=Asseco Data Systems S.A.,C=PL
SHA256 Thumbprint: FE7696573855773E37A95E7AD4D9CC96C30157C15D31765BA9B15704E1AE78FD
SHA256 Thumbprint: D92C171F5CF890BA428019292927FE22F3207FD2B54449CB6F675AF4922146E2
SHA256 Thumbprint: DBA84DD7EF622D485463A90137EA4D574DF8550928F6AFA03B4D8B1141E636CC
SHA256 Thumbprint: E8E8176536A60CC2C4E10187C3BEFCA20EF263497018F566D5BEA0F94D0C111B
SHA256 Thumbprint: 90370D3EFA88BF58C30105BA25104A358460A7FA52DFC2011DF233A0F417912A
CN=DIGITALSIGN GLOBAL ROOT ECDSA CA,O=DigitalSign Certificadora Digital,C=PT
SHA256 Thumbprint: 261D7114AE5F8FF2D8C7209A9DE4289E6AFC9D717023D85450909199F1857CFE
CN=DIGITALSIGN GLOBAL ROOT RSA CA,O=DigitalSign Certificadora Digital,C=PT
SHA256 Thumbprint: 82BD5D851ACF7F6E1BA7BFCBC53030D0E7BC3C21DF772D858CAB41D199BDF595
CN=e-Szigno Root CA 2017,O=Microsec Ltd.,L=Budapest,C=HU,2.5.4.97=#130e56415448552d3233353834343937
SHA256 Thumbprint: BEB00B30839B9BC32C32E4447905950641F26421B15ED089198B518AE2EA1B99
SHA256 Thumbprint: DB3517D1F6732A2D5AB97C533EC70779EE3270A62FB4AC4238372460E6F01E88
SHA256 Thumbprint: 5CBF6FB81FD417EA4128CD6F8172A3C9402094F74AB2ED3A06B4405D04F30B19
SHA256 Thumbprint: 319AF0A7729E6F89269C131EA6A3A16FCD86389FDCAB3C47A4A675C161A3F974
SHA256 Thumbprint: B085D70B964F191A73E4AF0D54AE7A0E07AAFDAF9B71DD0862138AB7325A24A2
SHA256 Thumbprint: 9A296A5182D1D451A2E37F439B74DAAFA267523329F90F9A0D2007C334E23C9A
SHA256 Thumbprint: D947432ABDE7B7FA90FC2E6B59101B1280E0E1C7E4E40FA3C6887FFF57A7F4CF
SHA256 Thumbprint: 8D25CD97229DBF70356BDA4EB3CC734031E24CF00FAFCFD32DC76EB5841C7EA8
SHA256 Thumbprint: 34D8A73EE208D9BCDB0D956520934B4E40E69482596E8B6F73C8426B010A6F48
SHA256 Thumbprint: 349DFA4058C5E263123B398AE795573C4E1313C83FE68F93556CD5E8031B3C7D
CN=HARICA Client ECC Root CA 2021,O=Hellenic Academic and Research Institutions CA,C=GR
SHA256 Thumbprint: 8DD4B5373CB0DE36769C12339280D82746B3AA6CD426E797A31BABE4279CF00B
CN=HARICA Client RSA Root CA 2021,O=Hellenic Academic and Research Institutions CA,C=GR
SHA256 Thumbprint: 1BE7ABE30686B16348AFD1C61B6866A0EA7F4821E67D5E8AF937CF8011BC750D
SHA256 Thumbprint: 48E1CF9E43B688A51044160F46D773B8277FE45BEAAD0E4DF90D1974382FEA99
CN=Sectigo Public Email Protection Root E46,O=Sectigo Limited,C=GB
SHA256 Thumbprint: 22D9599234D60F1D4BC7C7E96F43FA555B07301FD475175089DAFB8C25E477B3
CN=Sectigo Public Email Protection Root R46,O=Sectigo Limited,C=GB
SHA256 Thumbprint: D5917A7791EB7CF20A2E57EB98284A67B28A57E89182DA53D546678C9FDE2B4F
CN=Security Communication ECC RootCA1,O=SECOM Trust Systems CO.\,LTD.,C=JP
SHA256 Thumbprint: E74FBDA55BD564C473A36B441AA799C8A68E077440E8288B9FA1E50E4BBACA11
CN=Security Communication RootCA3,O=SECOM Trust Systems CO.\,LTD.,C=JP
SHA256 Thumbprint: 24A55C2AB051442D0617766541239A4AD032D7C55175AA34FFDE2FBC4F5C5294
SHA256 Thumbprint: AD7DD58D03AEDB22A30B5084394920CE12230C2D8017AD9B81AB04079BDD026B
SHA256 Thumbprint: 1D4CA4A2AB21D0093659804FC0EB2175A617279B56A2475245C9517AFEB59153
CN=Telekom Security SMIME ECC Root 2021,O=Deutsche Telekom Security GmbH,C=DE
SHA256 Thumbprint: 3AE6DF7E0D637A65A8C81612EC6F9A142F85A16834C10280D88E707028518755
CN=Telekom Security SMIME RSA Root 2023,O=Deutsche Telekom Security GmbH,C=DE
SHA256 Thumbprint: 78A656344F947E9CC0F734D9053D32F6742086B6B9CD2CAE4FAE1A2E4EFDE048
SHA256 Thumbprint: 242B69742FCB1E5B2ABF98898B94572187544E5B4D9911786573621F6A74B82C
CN=TrustAsia Global Root CA G3,O=TrustAsia Technologies\, Inc.,C=CN
SHA256 Thumbprint: E0D3226AEB1163C2E48FF9BE3B50B4C6431BE7BB1EACC5C36B5D5EC509039A08
CN=TrustAsia Global Root CA G4,O=TrustAsia Technologies\, Inc.,C=CN
SHA256 Thumbprint: BE4B56CB5056C0136A526DF444508DAA36A0B54F42E4AC38F72AF470E479654C
CN=Trustwave Global Certification Authority,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US
SHA256 Thumbprint: 97552015F5DDFC3C8788C006944555408894450084F100867086BC1A2BB58DC8
SHA256 Thumbprint: 945BBC825EA554F489D1FD51A73DDF2EA624AC7019A05205225C22A78CCFA8B4
SHA256 Thumbprint: 55903859C8C0C3EBB8759ECE4E2557225FF5758BBD38EBD48276601E1BD58097
The new trusted root list is in effect now, for future reference please note that we will send an update to this list before updating the trusted list from now on.
Thank you
-Erhan, on behalf of the Gmail Security team